Extracted

• • Target

    64c008eff9b0d02a9091426e3b58e80e61564759c0d2b1922e28cef00fa0a86dN.exe

  • Size

    952KB

  • MD5

    2a86b06daf346364a9f042af6fc85930

  • SHA1

    260c0a6c1a094cf2648f67d8502dd6680c6ee1f6

  • SHA256

    64c008eff9b0d02a9091426e3b58e80e61564759c0d2b1922e28cef00fa0a86d

  • SHA512

    9aa05eda69ea1e6981ab1194ff43433c008b36c5ff192fd34a0653105f462c441fd11ece75a7e07a2b40851e01979c127c7b863a9ae03346e959200f36811297

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5Z:Rh+ZkldDPK8YaKjZ

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2